Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/wGSyp_ov6__jVp60lBoSQDhkxsA.roa
File: wGSyp_ov6__jVp60lBoSQDhkxsA.roa (raw, json)
Hash identifier: 7LQM/k7GChHMnPALQCkSk+FwTCK8xLpyAKnkCuF9iVw=
Subject key identifier: C0:64:B2:A7:FA:2F:EB:FF:E3:56:9E:B4:94:1A:12:40:38:64:C6:C0
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0186CC0219E0E4A895A59D5D5BCB5A381CFF
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/wGSyp_ov6__jVp60lBoSQDhkxsA.roa
Signing time: Fri 10 Mar 2023 14:52:15 +0000
ROA not before: Fri 10 Mar 2023 14:52:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57355
IP address blocks: 2.57.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Mar 2023 19:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:02:19:e0:e4:a8:95:a5:9d:5d:5b:cb:5a:38:1c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 10 14:52:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c064b2a7fa2febffe3569eb4941a12403864c6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:40:ea:e6:16:1c:d4:69:87:ba:5a:66:f3:9c:
29:09:44:72:33:5b:7a:fc:6a:94:b8:4a:3c:0a:60:
71:1d:ef:42:05:ad:28:b2:e5:32:fa:5e:39:97:e4:
d4:82:f5:32:47:49:c2:be:d2:3d:0f:e9:be:be:aa:
c0:20:80:9b:23:d6:b4:6f:fc:31:ce:43:2d:fe:f9:
39:47:a8:a2:18:bc:7c:d6:7f:7f:5e:dd:38:08:3f:
7e:ec:37:8e:7f:91:8b:04:40:69:ba:a6:27:ed:19:
0e:12:6f:22:8c:1f:b6:1c:f6:2b:86:8d:6b:84:e7:
c9:fb:40:71:90:63:b9:09:db:ea:6c:b2:44:58:c7:
4d:86:6c:92:f4:28:d7:32:98:0e:79:c1:f3:08:bf:
38:96:51:17:31:ff:e3:ae:59:81:17:1d:2d:34:77:
34:18:b8:57:0e:9a:a6:a1:1c:84:ec:57:09:76:80:
b5:ee:d6:dc:05:db:66:95:cf:a5:d1:91:a1:f9:25:
f9:cf:c9:33:54:93:b8:6b:71:d5:68:c7:1e:ef:6e:
20:8f:d1:fe:65:0f:ab:86:94:5d:64:1e:34:b8:89:
88:bd:e9:3e:b6:9e:da:89:a5:31:2b:99:c5:ec:bf:
69:47:40:0c:38:c8:3a:97:32:13:36:e8:cd:f6:1a:
49:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:B2:A7:FA:2F:EB:FF:E3:56:9E:B4:94:1A:12:40:38:64:C6:C0
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/wGSyp_ov6__jVp60lBoSQDhkxsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.149.0/24
Signature Algorithm: sha256WithRSAEncryption
20:9d:70:cb:9c:a9:1e:ff:f3:44:11:53:b6:86:a0:c9:86:ab:
cd:c9:3c:48:40:e1:de:da:d0:3c:ea:fb:8f:7e:05:f6:22:22:
72:e7:6a:61:79:a4:69:17:7b:8c:33:af:08:a5:1b:8f:f8:31:
75:2c:5c:8a:74:9b:f6:17:65:90:36:d6:be:2e:09:65:15:3d:
a9:91:3a:b9:a5:6e:d8:60:3b:d1:98:63:2f:7c:5c:dc:bb:53:
90:df:b0:30:92:85:0f:f9:6f:8e:93:aa:30:ea:c2:22:11:8e:
0f:84:47:68:2c:ab:12:8f:48:57:91:64:9b:f5:e0:81:29:8d:
b8:0f:a5:49:a9:90:16:f4:20:79:87:12:74:77:64:c8:4c:ca:
ea:9b:1f:a8:68:54:0a:f9:03:6b:b5:dd:b7:1e:ee:79:07:5a:
7e:b7:05:93:d2:23:1b:1a:d5:7f:c7:78:31:67:28:d9:53:e9:
80:ee:ec:08:b5:ab:b6:ef:ad:38:57:2a:10:9d:e4:0b:13:6c:
fb:20:f0:8a:6f:33:78:56:f3:c6:21:58:1e:ea:0b:f8:a0:cd:
57:58:4d:ff:e9:e9:26:08:28:63:77:67:7d:c9:e9:aa:41:32:
bf:19:8e:36:20:29:85:a7:6a:bb:14:da:a9:da:75:6b:bc:3d:
bb:12:14:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:39 2024 by rpki-client on console-ams.rpki-client.org